Redirects Archives

Cascading Redirects: Unmasking a Multi-Site JavaScript Malware Campaign

Puja Srivastava
March 6, 2025

During a recent website security investigation, we uncovered a malicious JavaScript injection affecting a WordPress website. The infection was responsible for redirecting visitors to unwanted…

Read the Post

Rogue Ads Redirect Visitors

Matt Morrow
October 31, 2024

Ads are everywhere. They generate revenue for site owners and can present related content to the website being visited. As detailed in previous articles, bad…

Read the Post

Indonesian Gambling Redirect Hiding in Plain Sight

Kayleigh Martin
October 30, 2024

Many pieces of malware found over the years have been complex and difficult to find. Attackers often obfuscate their code to make it harder to…

Read the Post

SiteCheck Remote Website Scanner — Mid-Year 2024 Report

Kyle Knight
September 11, 2024

Conducting an external website scan for indicators of compromise is one of the easiest ways to identify security issues. While remote website scanners may not…

Read the Post

Mal.Metrica Redirects Users to Scam Sites

Ben Martin
May 2, 2024

One of our analysts recently identified a new Mal.Metrica redirect scam on compromised websites, but one that requires a little bit of effort on the…

Read the Post

Sign1 Malware: Analysis, Campaign History & Indicators of Compromise

Ben Martin
March 20, 2024

A new client recently came to us reporting seemingly random pop ups occurring on their website. While it was clear that there was something amiss…

Read the Post

Thousands of Sites with Popup Builder Compromised by Balada Injector

Denis Sinegubko
January 10, 2024

On December 11, 2023 WPScan published Marc Montpas’ research on the stored XSS vulnerability in the popular Popup Builder plugin (200,000+ active installation) that was…

Read the Post

How to Fix “Not Secure” Warnings and SSL Issues in WordPress (8 Steps)

Puja Srivastava
September 7, 2023

If you own a WordPress website and ever encountered the “Not Secure” warning, you might have worried that visitors would perceive your site as spam…

Read the Post

Bogus URL Shorteners Go Mobile-Only in AdSense Fraud Campaign

Denis Sinegubko
September 5, 2023

Since September 2022, our team has been tracking a bogus URL shortener redirect campaign that started with just a single domain: ois[.]is. By the beginning…

Read the Post

From Google DNS to Tech Support Scam Sites: Unmasking the Malware Trail

Denis Sinegubko
August 10, 2023

A vast majority of website malware employ the ever-familiar HTTP/HTTPS protocols for its malicious activities. But, we also periodically confront more interesting hybrid malware leveraging…

Read the Post

SiteCheck Mid-Year Report Hacked Websites

SiteCheck Remote Website Scanner — Mid-Year 2023 Report

Denis Sinegubko
August 8, 2023

Conducting an external website scan for indicators of compromise is one of the easiest ways to identify security issues. While remote scanners may not provide…

Read the Post